<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:14px"><div id="yui_3_16_0_ym19_1_1490204227696_24605">cheers,</div><div id="yui_3_16_0_ym19_1_1490204227696_24606"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1490204227696_24607">Thanks for the response, but haven't the evp_pkey struct of the public key. I' ve only the an bytes string that i retrieved from IEEE cert with "<a id="yui_3_16_0_ym19_1_1490204227696_25151" href="http://docs.huihoo.com/doxygen/openssl/1.0.1c/crypto_2pem_2pem_8h.html#a832e754f63ae34bd977755079c7132bb">PEM_bytes_read_bio</a>()". Now in want to form the ec_key struct and then the evp_pkey struct.</div><div id="yui_3_16_0_ym19_1_1490204227696_25484" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1490204227696_25624" dir="ltr">Thanks</div><div id="yui_3_16_0_ym19_1_1490204227696_25625" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1490204227696_25626" dir="ltr">Best regards</div><div id="yui_3_16_0_ym19_1_1490204227696_25627" dir="ltr"><br></div><div dir="ltr">Christian Adja<br></div><div id="yui_3_16_0_ym19_1_1490204227696_24558"><span></span></div> <div class="qtdSeparateBR"><br><br></div><div style="display: block;" class="yahoo_quoted"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 14px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"><font face="Arial" size="2"> Il Mercoledì 22 Marzo 2017 19:01, Ethan Rahn <ethan.rahn@gmail.com> ha scritto:<br></font></div> <br><br> <div class="y_msg_container"><div id="yiv9963354710"><div><div dir="ltr">Couldn't you just use EVP_PKEY_get1_EC_KEY?<div><br clear="none"></div><div><a rel="nofollow" shape="rect" target="_blank" href="https://www.openssl.org/docs/man1.0.2/crypto/EVP_PKEY_get1_EC_KEY.html">https://www.openssl.org/docs/man1.0.2/crypto/EVP_PKEY_get1_EC_KEY.html</a><br clear="none"></div><div><br clear="none"></div><div>Cheers,</div><div><br clear="none"></div><div>Ethan</div></div><div class="yiv9963354710gmail_extra"><br clear="none"><div class="yiv9963354710gmail_quote">On Wed, Mar 22, 2017 at 10:48 AM, Christian Adja via openssl-users <span dir="ltr"><<a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>></span> wrote:<br clear="none"><blockquote class="yiv9963354710gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div class="yiv9963354710yqt9168982888" id="yiv9963354710yqt44168"><div><div style="color:#000;background-color:#fff;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:14px;"><div id="yiv9963354710m_-8148770365454790934yui_3_16_0_ym19_1_1490204227696_3435">Good evening everybody,</div><div dir="ltr" id="yiv9963354710m_-8148770365454790934yui_3_16_0_ym19_1_1490204227696_3434">I need help about to transform public key (unsigned char *) retrieved from IEEE cert in EVP_PKEY o EC_KEY. The public key is an ecdsaNistP256 in compressed form (compressedy1). <br clear="none"></div><div dir="ltr" id="yiv9963354710m_-8148770365454790934yui_3_16_0_ym19_1_1490204227696_4905">The public key form in hex = <br clear="none"></div><div dir="ltr" id="yiv9963354710m_-8148770365454790934yui_3_16_0_ym19_1_1490204227696_4903">|00|80|83|x point (32 bytes)|</div><div dir="ltr" id="yiv9963354710m_-8148770365454790934yui_3_16_0_ym19_1_1490204227696_4825"><br clear="none"></div><div dir="ltr" id="yiv9963354710m_-8148770365454790934yui_3_16_0_ym19_1_1490204227696_4826">Thanks,</div><div dir="ltr" id="yiv9963354710m_-8148770365454790934yui_3_16_0_ym19_1_1490204227696_4827"><br clear="none"></div><div dir="ltr" id="yiv9963354710m_-8148770365454790934yui_3_16_0_ym19_1_1490204227696_4828">Best Regards<br clear="none"></div><div id="yiv9963354710m_-8148770365454790934yui_3_16_0_ym19_1_1490204227696_3362"><span></span></div> <div class="yiv9963354710m_-8148770365454790934qtdSeparateBR"><br clear="none"><br clear="none"></div><div class="yiv9963354710m_-8148770365454790934yahoo_quoted" style="display:block;"> <div style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:14px;"> <div style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;"> <div dir="ltr"><font face="Arial" size="2"> Il Mercoledì 15 Marzo 2017 22:23, "<a rel="nofollow" shape="rect" ymailto="mailto:openssl-users-request@openssl.org" target="_blank" href="mailto:openssl-users-request@openssl.org">openssl-users-request@ openssl.org</a>" <<a rel="nofollow" shape="rect" ymailto="mailto:openssl-users-request@openssl.org" target="_blank" href="mailto:openssl-users-request@openssl.org">openssl-users-request@ openssl.org</a>> ha scritto:<br clear="none"></font></div> <br clear="none"><br clear="none"> <div class="yiv9963354710m_-8148770365454790934y_msg_container"><div dir="ltr">Send openssl-users mailing list submissions to<br clear="none"></div><div dir="ltr"> <a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">To subscribe or unsubscribe via the World Wide Web, visit<br clear="none"></div><div dir="ltr"> <a rel="nofollow" shape="rect" target="_blank" href="https://mta.openssl.org/mailman/listinfo/openssl-users">https://mta.openssl.org/ mailman/listinfo/openssl-users</a><br clear="none"></div><div dir="ltr">or, via email, send a message with subject or body 'help' to<br clear="none"></div><div dir="ltr"> <a rel="nofollow" shape="rect" ymailto="mailto:openssl-users-request@openssl.org" target="_blank" href="mailto:openssl-users-request@openssl.org">openssl-users-request@openssl. org</a><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">You can reach the person managing the list at<br clear="none"></div><div dir="ltr"> <a rel="nofollow" shape="rect" ymailto="mailto:openssl-users-owner@openssl.org" target="_blank" href="mailto:openssl-users-owner@openssl.org">openssl-users-owner@openssl. org</a><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">When replying, please edit your Subject line so it is more specific<br clear="none"></div><div dir="ltr">than "Re: Contents of openssl-users digest..."<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Today's Topics:<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"> 1. Request for adding new ciphers (Christian Adja)<br clear="none"></div><div dir="ltr"> 2. Re: Request for adding new ciphers (Matt Caswell)<br clear="none"></div><div dir="ltr"> 3. Generating dh parameters multithreaded? (Joseph Southwell)<br clear="none"></div><div dir="ltr"> 4. Re: Generating dh parameters multithreaded? (Salz, Rich)<br clear="none"></div><div dir="ltr"> 5. OpenSSL Certificate Cross Signing (Moritz Wirth)<br clear="none"></div><div dir="ltr"> 6. Re: PKCS#7 (val?ry)<br clear="none"></div><div dir="ltr"> 7. Re: Generating dh parameters multithreaded? (Joseph Southwell)<br clear="none"></div><div dir="ltr"> 8. Re: Generating dh parameters multithreaded? (Salz, Rich)<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">------------------------------ ------------------------------ ----------<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Message: 1<br clear="none"></div><div dir="ltr">Date: Wed, 15 Mar 2017 18:03:44 +0000 (UTC)<br clear="none"></div><div dir="ltr">From: Christian Adja <<a rel="nofollow" shape="rect" ymailto="mailto:christian_adja@yahoo.it" target="_blank" href="mailto:christian_adja@yahoo.it">christian_adja@yahoo.it</a>><br clear="none"></div><div dir="ltr">To: "<a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>" <<a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>><br clear="none"></div><div dir="ltr">Subject: [openssl-users] Request for adding new ciphers<br clear="none"></div><div dir="ltr">Message-ID: <<a rel="nofollow" shape="rect" ymailto="mailto:1576557894.1332584.1489601024241@mail.yahoo.com" target="_blank" href="mailto:1576557894.1332584.1489601024241@mail.yahoo.com">1576557894.1332584. 1489601024241@mail.yahoo.com</a>><br clear="none"></div><div dir="ltr">Content-Type: text/plain; charset="utf-8"<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Hi everyone,<br clear="none"></div><div dir="ltr">Someone can help for adding the ciphersuite " ECDHE_ECDSA_WITH_AES_128_CCM " and "ECDHE_ECDSA_WITH_AES_256_CCM " in openssl? <br clear="none"></div><div dir="ltr">I tried adding in the file tls1.h??? # define TLS1_CK_ECDHE_ECDSA_WITH_AES_ 128_CCM??????????? 0x0300C0AC<br clear="none"></div><div dir="ltr">??? # define TLS1_CK_ECDHE_ECDSA_WITH_AES_ 256_CCM??????????? 0x0300C0AD<br clear="none"></div><div dir="ltr">And modifing the file? ssl_ciph.c the functions??? ssl_load_ciphers() ... And modifing the file evp_cipher.c and sssl_locl.cand finaly ssl_algs.c.<br clear="none"></div><div dir="ltr">There are no way to make it works. It continue to give me? error: ssl3_get_client_hello:no shared cipher:s3_srvr.c:1420<br clear="none"></div><div dir="ltr">thanks.<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">-------------- next part --------------<br clear="none"></div><div dir="ltr">An HTML attachment was scrubbed...<br clear="none"></div><div dir="ltr">URL: <<a rel="nofollow" shape="rect" target="_blank" href="http://mta.openssl.org/pipermail/openssl-users/attachments/20170315/5ea926a1/attachment-0001.html">http://mta.openssl.org/ pipermail/openssl-users/ attachments/20170315/5ea926a1/ attachment-0001.html</a>><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">------------------------------<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Message: 2<br clear="none"></div><div dir="ltr">Date: Wed, 15 Mar 2017 18:18:52 +0000<br clear="none"></div><div dir="ltr">From: Matt Caswell <<a rel="nofollow" shape="rect" ymailto="mailto:matt@openssl.org" target="_blank" href="mailto:matt@openssl.org">matt@openssl.org</a>><br clear="none"></div><div dir="ltr">To: <a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br clear="none"></div><div dir="ltr">Subject: Re: [openssl-users] Request for adding new ciphers<br clear="none"></div><div dir="ltr">Message-ID: <<a rel="nofollow" shape="rect" ymailto="mailto:e507eba7-b0c6-d85a-78aa-2af36c2e487e@openssl.org" target="_blank" href="mailto:e507eba7-b0c6-d85a-78aa-2af36c2e487e@openssl.org">e507eba7-b0c6-d85a-78aa- 2af36c2e487e@openssl.org</a>><br clear="none"></div><div dir="ltr">Content-Type: text/plain; charset=windows-1252<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">On 15/03/17 18:03, Christian Adja via openssl-users wrote:<br clear="none"></div><div dir="ltr">> Hi everyone,<br clear="none"></div><div dir="ltr">> <br clear="none"></div><div dir="ltr">> Someone can help for adding the ciphersuite "<br clear="none"></div><div dir="ltr">> ECDHE_ECDSA_WITH_AES_128_CCM " and "ECDHE_ECDSA_WITH_AES_256_CCM " in<br clear="none"></div><div dir="ltr">> openssl?<br clear="none"></div><div dir="ltr">> I tried adding in the file tls1.h<br clear="none"></div><div dir="ltr">> # define TLS1_CK_ECDHE_ECDSA_WITH_AES_ 128_CCM 0x0300C0AC<br clear="none"></div><div dir="ltr">> # define TLS1_CK_ECDHE_ECDSA_WITH_AES_ 256_CCM 0x0300C0AD<br clear="none"></div><div dir="ltr">> <br clear="none"></div><div dir="ltr">> And modifing the file ssl_ciph.c the functions<br clear="none"></div><div dir="ltr">> ssl_load_ciphers() ...<br clear="none"></div><div dir="ltr">> And modifing the file evp_cipher.c and sssl_locl.c<br clear="none"></div><div dir="ltr">> and finaly ssl_algs.c.<br clear="none"></div><div dir="ltr">> <br clear="none"></div><div dir="ltr">> There are no way to make it works. It continue to give me error:<br clear="none"></div><div dir="ltr">> ssl3_get_client_hello:no shared cipher:s3_srvr.c:1420<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">These ciphersuites already exist in OpenSSL (from version 1.1.0).<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Matt<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">------------------------------<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Message: 3<br clear="none"></div><div dir="ltr">Date: Wed, 15 Mar 2017 14:18:38 -0400<br clear="none"></div><div dir="ltr">From: Joseph Southwell <<a rel="nofollow" shape="rect" ymailto="mailto:jsouthwell@serengeti.com" target="_blank" href="mailto:jsouthwell@serengeti.com">jsouthwell@serengeti.com</a>><br clear="none"></div><div dir="ltr">To: <a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br clear="none"></div><div dir="ltr">Subject: [openssl-users] Generating dh parameters multithreaded?<br clear="none"></div><div dir="ltr">Message-ID: <<a rel="nofollow" shape="rect" ymailto="mailto:56015584-6EDC-4BD6-AA21-F27835281A99@serengeti.com" target="_blank" href="mailto:56015584-6EDC-4BD6-AA21-F27835281A99@serengeti.com">56015584-6EDC-4BD6-AA21- F27835281A99@serengeti.com</a>><br clear="none"></div><div dir="ltr">Content-Type: text/plain; charset="utf-8"<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">On any new install of our software we generate new dh parameters as follows?<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">DH *dh = DH_new();<br clear="none"></div><div dir="ltr">!DH_generate_parameters_ex(dh, 2048, 2, NULL);<br clear="none"></div><div dir="ltr">int codes = 0;<br clear="none"></div><div dir="ltr">DH_check(dh, &codes);<br clear="none"></div><div dir="ltr">DH_generate_key(dh);<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">It takes a long time. Is there some way to have it use all available cores instead of just the one?<br clear="none"></div><div dir="ltr">-------------- next part --------------<br clear="none"></div><div dir="ltr">An HTML attachment was scrubbed...<br clear="none"></div><div dir="ltr">URL: <<a rel="nofollow" shape="rect" target="_blank" href="http://mta.openssl.org/pipermail/openssl-users/attachments/20170315/abdcfd11/attachment-0001.html">http://mta.openssl.org/ pipermail/openssl-users/ attachments/20170315/abdcfd11/ attachment-0001.html</a>><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">------------------------------<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Message: 4<br clear="none"></div><div dir="ltr">Date: Wed, 15 Mar 2017 18:21:05 +0000<br clear="none"></div><div dir="ltr">From: "Salz, Rich" <<a rel="nofollow" shape="rect" ymailto="mailto:rsalz@akamai.com" target="_blank" href="mailto:rsalz@akamai.com">rsalz@akamai.com</a>><br clear="none"></div><div dir="ltr">To: "<a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>" <<a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>><br clear="none"></div><div dir="ltr">Subject: Re: [openssl-users] Generating dh parameters multithreaded?<br clear="none"></div><div dir="ltr">Message-ID:<br clear="none"></div><div dir="ltr"> <<a rel="nofollow" shape="rect" ymailto="mailto:9ff829cd17f74e4a910ca067196f7d62@usma1ex-dag1mb1.msg.corp.akamai.com" target="_blank" href="mailto:9ff829cd17f74e4a910ca067196f7d62@usma1ex-dag1mb1.msg.corp.akamai.com">9ff829cd17f74e4a910ca067196f7 d62@usma1ex-dag1mb1.msg.corp. akamai.com</a>><br clear="none"></div><div dir="ltr">Content-Type: text/plain; charset="utf-8"<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">> It takes a long time. Is there some way to have it use all available cores instead of just the one?<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">You'll have to write the code to do that parallelism yourself.<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">------------------------------<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Message: 5<br clear="none"></div><div dir="ltr">Date: Wed, 15 Mar 2017 19:46:07 +0100<br clear="none"></div><div dir="ltr">From: Moritz Wirth <<a rel="nofollow" shape="rect" ymailto="mailto:mw@flanga.io" target="_blank" href="mailto:mw@flanga.io">mw@flanga.io</a>><br clear="none"></div><div dir="ltr">To: <a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br clear="none"></div><div dir="ltr">Subject: [openssl-users] OpenSSL Certificate Cross Signing<br clear="none"></div><div dir="ltr">Message-ID: <<a rel="nofollow" shape="rect" ymailto="mailto:c879dec1-9fab-5ecc-de01-4e033c690690@flanga.io" target="_blank" href="mailto:c879dec1-9fab-5ecc-de01-4e033c690690@flanga.io">c879dec1-9fab-5ecc-de01- 4e033c690690@flanga.io</a>><br clear="none"></div><div dir="ltr">Content-Type: text/plain; charset=utf-8<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Good Evening all,<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">I have 2 Root Certificate Authorities which I want to use to cross sign<br clear="none"></div><div dir="ltr">an intermediate certificate. I created a certificate request and signed<br clear="none"></div><div dir="ltr">it with both CAs.<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">I issued an end user certificate with the intermediate CA and added both<br clear="none"></div><div dir="ltr">intermediate CA Certificates (the one from Root1 and the one signed by<br clear="none"></div><div dir="ltr">Root2). If only one CA is trusted, the certificate is still recognized<br clear="none"></div><div dir="ltr">as trusted in Firefox regardless which certificate is on top of the<br clear="none"></div><div dir="ltr">chain (Which is exactly what I want.)<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">I wondered if I can connect both intermediate Certificates to a single<br clear="none"></div><div dir="ltr">certificate or do I always need both certificates?<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Best Regards,<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Moritz<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">------------------------------<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Message: 6<br clear="none"></div><div dir="ltr">Date: Wed, 15 Mar 2017 21:42:50 +0100<br clear="none"></div><div dir="ltr">From: val?ry <<a rel="nofollow" shape="rect" ymailto="mailto:vsbrin@gmail.com" target="_blank" href="mailto:vsbrin@gmail.com">vsbrin@gmail.com</a>><br clear="none"></div><div dir="ltr">To: <a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br clear="none"></div><div dir="ltr">Subject: Re: [openssl-users] PKCS#7<br clear="none"></div><div dir="ltr">Message-ID:<br clear="none"></div><div dir="ltr"> <CAMkdoSFR_kT= wxt5jAFMENwN3dXEhzVr=VkJmh-7=<a rel="nofollow" shape="rect" ymailto="mailto:ocaHj14OA@mail.gmail.com" target="_blank" href="mailto:ocaHj14OA@mail.gmail.com">o caHj14OA@mail.gmail.com</a>><br clear="none"></div><div dir="ltr">Content-Type: text/plain; charset="utf-8"<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Alright, big thanks to both of you for your input!<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">On Mar 15, 2017 23:01, "Wouter Verhelst" <<a rel="nofollow" shape="rect" ymailto="mailto:wouter.verhelst@fedict.be" target="_blank" href="mailto:wouter.verhelst@fedict.be">wouter.verhelst@fedict.be</a>> wrote:<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">On 15-03-17 05:13, val?ry wrote:<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">> Hi,<br clear="none"></div><div dir="ltr">><br clear="none"></div><div dir="ltr">> thank you very much for your response.<br clear="none"></div><div dir="ltr">> Say someone would be able to gather several clear text AES keys and<br clear="none"></div><div dir="ltr">> their respective asymmetrically encrypted RSA blocks. Would it weakens<br clear="none"></div><div dir="ltr">> the security of the RSA key pair ? I mean could it be easier for someone<br clear="none"></div><div dir="ltr">> using that information to brute force an RSA key pair ?<br clear="none"></div><div dir="ltr">><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Think of it this way:<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">As far as the RSA algorithm is concerned, the AES keys are just data. They<br clear="none"></div><div dir="ltr">happen to be AES keys, but they might have been a hash value, an image, or<br clear="none"></div><div dir="ltr">somebody's date of birth.<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">If getting the cleartext as well as the encrypted text for an RSA message<br clear="none"></div><div dir="ltr">would allow you to more easily guess the RSA key, then the RSA algorithm<br clear="none"></div><div dir="ltr">would be seriously flawed.<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">There is no known attack against RSA for which this is true, however, as<br clear="none"></div><div dir="ltr">Rich pointed out.<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">-- <br clear="none"></div><div dir="ltr">Wouter Verhelst<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">-- <br clear="none"></div><div dir="ltr">openssl-users mailing list<br clear="none"></div><div dir="ltr">To unsubscribe: <a rel="nofollow" shape="rect" target="_blank" href="https://mta.openssl.org/mailman/listinfo/openssl-users">https://mta.openssl.org/ mailman/listinfo/openssl-users</a><br clear="none"></div><div dir="ltr">-------------- next part --------------<br clear="none"></div><div dir="ltr">An HTML attachment was scrubbed...<br clear="none"></div><div dir="ltr">URL: <<a rel="nofollow" shape="rect" target="_blank" href="http://mta.openssl.org/pipermail/openssl-users/attachments/20170315/c5426a43/attachment-0001.html">http://mta.openssl.org/ pipermail/openssl-users/ attachments/20170315/c5426a43/ attachment-0001.html</a>><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">------------------------------<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Message: 7<br clear="none"></div><div dir="ltr">Date: Wed, 15 Mar 2017 17:08:50 -0400<br clear="none"></div><div dir="ltr">From: Joseph Southwell <<a rel="nofollow" shape="rect" ymailto="mailto:jsouthwell@serengeti.com" target="_blank" href="mailto:jsouthwell@serengeti.com">jsouthwell@serengeti.com</a>><br clear="none"></div><div dir="ltr">To: "Salz, Rich" <<a rel="nofollow" shape="rect" ymailto="mailto:rsalz@akamai.com" target="_blank" href="mailto:rsalz@akamai.com">rsalz@akamai.com</a>>, <a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br clear="none"></div><div dir="ltr">Subject: Re: [openssl-users] Generating dh parameters multithreaded?<br clear="none"></div><div dir="ltr">Message-ID: <<a rel="nofollow" shape="rect" ymailto="mailto:F3ADE150-0FAA-46B8-B481-816C1DD1B984@serengeti.com" target="_blank" href="mailto:F3ADE150-0FAA-46B8-B481-816C1DD1B984@serengeti.com">F3ADE150-0FAA-46B8-B481- 816C1DD1B984@serengeti.com</a>><br clear="none"></div><div dir="ltr">Content-Type: text/plain; charset=us-ascii<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Are you suggesting that I should modify openssl myself to expose that functionality or are suggesting that there is a way to do that given the already exposed functionality? If it is the latter could you point me in the right direction?<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">> On Mar 15, 2017, at 2:21 PM, Salz, Rich via openssl-users <<a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>> wrote:<br clear="none"></div><div dir="ltr">> <br clear="none"></div><div dir="ltr">>> It takes a long time. Is there some way to have it use all available cores instead of just the one?<br clear="none"></div><div dir="ltr">> <br clear="none"></div><div dir="ltr">> You'll have to write the code to do that parallelism yourself.<br clear="none"></div><div dir="ltr">> -- <br clear="none"></div><div dir="ltr">> openssl-users mailing list<br clear="none"></div><div dir="ltr">> To unsubscribe: <a rel="nofollow" shape="rect" target="_blank" href="https://mta.openssl.org/mailman/listinfo/openssl-users">https://mta.openssl.org/ mailman/listinfo/openssl-users</a><br clear="none"></div><div dir="ltr">> <br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">------------------------------<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Message: 8<br clear="none"></div><div dir="ltr">Date: Wed, 15 Mar 2017 21:15:11 +0000<br clear="none"></div><div dir="ltr">From: "Salz, Rich" <<a rel="nofollow" shape="rect" ymailto="mailto:rsalz@akamai.com" target="_blank" href="mailto:rsalz@akamai.com">rsalz@akamai.com</a>><br clear="none"></div><div dir="ltr">To: Joseph Southwell <<a rel="nofollow" shape="rect" ymailto="mailto:jsouthwell@serengeti.com" target="_blank" href="mailto:jsouthwell@serengeti.com">jsouthwell@serengeti.com</a>>,<br clear="none"></div><div dir="ltr"> "<a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>" <<a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>><br clear="none"></div><div dir="ltr">Subject: Re: [openssl-users] Generating dh parameters multithreaded?<br clear="none"></div><div dir="ltr">Message-ID:<br clear="none"></div><div dir="ltr"> <<a rel="nofollow" shape="rect" ymailto="mailto:2a86a335027d437ba9531551ce0ea897@usma1ex-dag1mb1.msg.corp.akamai.com" target="_blank" href="mailto:2a86a335027d437ba9531551ce0ea897@usma1ex-dag1mb1.msg.corp.akamai.com">2a86a335027d437ba9531551ce0ea 897@usma1ex-dag1mb1.msg.corp. akamai.com</a>><br clear="none"></div><div dir="ltr">Content-Type: text/plain; charset="Windows-1252"<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">> Are you suggesting that I should modify openssl myself to expose that<br clear="none"></div><div dir="ltr">> functionality or are suggesting that there is a way to do that given the already<br clear="none"></div><div dir="ltr">> exposed functionality? If it is the latter could you point me in the right<br clear="none"></div><div dir="ltr">> direction?<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">OpenSSL code does not do what you want. You'll have to write it<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">------------------------------<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Subject: Digest Footer<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">______________________________ _________________<br clear="none"></div><div dir="ltr">openssl-users mailing list<br clear="none"></div><div dir="ltr"><a rel="nofollow" shape="rect" ymailto="mailto:openssl-users@openssl.org" target="_blank" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br clear="none"></div><div dir="ltr"><a rel="nofollow" shape="rect" target="_blank" href="https://mta.openssl.org/mailman/listinfo/openssl-users">https://mta.openssl.org/ mailman/listinfo/openssl-users</a><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">------------------------------<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">End of openssl-users Digest, Vol 28, Issue 21<br clear="none"></div><div dir="ltr">****************************** ***************<br clear="none"></div><br clear="none"><br clear="none"></div> </div> </div> </div></div></div></div><br clear="none">--<br clear="none">
openssl-users mailing list<br clear="none">
To unsubscribe: <a rel="nofollow" shape="rect" target="_blank" href="https://mta.openssl.org/mailman/listinfo/openssl-users">https://mta.openssl.org/ mailman/listinfo/openssl-users</a><br clear="none">
<br clear="none"></blockquote></div><br clear="none"></div></div></div><br><br></div> </div> </div> </div></div></body></html>